The CISA Exam
The CISA exam is one of the requirements to become a CISA. It is offered twice a year in June and December. It consists of 200 multiple-choice questions, administered during a four-hour session in multiple locations. The purpose of the exam is to test a candidate’s knowledge, evaluation and application of IS audit principles and practices and technical content areas.

The CISM Exam
The CISM exam covers five information security management areas, each of which is further defined and detailed through task and knowledge statements. These areas and statements were developed by the CISM Certification Board and represent a job practice analysis of the work performed by information security managers as validated by prominent industry leaders, subject matter experts and industry practitioners. It is offered twice a year in June and December. It consists of 200 multiple-choice questions, administered during a four-hour session in multiple locations.